After GDPR, Luxembourg’s web sprouted cookie banners — but only on about one site in three. Meanwhile nearly three in four .lu sites quietly load Google. By parsing the raw HTML of 83,000 website-years, I map the trackers they embed, the banners they show, and the handful of foreign companies the local web depends on.